SP_Init_v2
Static task
static1
Behavioral task
behavioral1
Sample
1ed5ff8eed1c3952f4468fc9f577dadf7568305b56f8c3af237666058fcac5b5.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1ed5ff8eed1c3952f4468fc9f577dadf7568305b56f8c3af237666058fcac5b5.dll
Resource
win10v2004-20230220-en
General
-
Target
1ed5ff8eed1c3952f4468fc9f577dadf7568305b56f8c3af237666058fcac5b5
-
Size
447KB
-
MD5
2e0ea2ad8d2f85e13b1bb624f04b5e7f
-
SHA1
39b1509a7145ca3ca73ae9851809cbf338e71fa9
-
SHA256
1ed5ff8eed1c3952f4468fc9f577dadf7568305b56f8c3af237666058fcac5b5
-
SHA512
c51af6a05f552837dbfaa17fb06456ef67c7ec9a5ae9670b641eb8e845df01fa6a89f22f99ea9b8ef8715d2d3d291111651961618b7738ab9c730bc34720cdda
-
SSDEEP
6144:F38jWap38nszZTKuzXWnZYNniBujQ9Un4QUD7Nzc4QAO3VDfERNURUCt1iTBq5ma:FUzvXWnZCnF3MxkYjCtcTs5mQwC
Malware Config
Signatures
Files
-
1ed5ff8eed1c3952f4468fc9f577dadf7568305b56f8c3af237666058fcac5b5.dll windows x86
44f79e43fe93ff6513205895d501a903
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetTempPathA
GetTempFileNameA
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteFileA
SetLastError
RaiseException
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
FindResourceW
FindResourceExW
LoadLibraryExA
GetModuleHandleA
IsDBCSLeadByte
DecodePointer
GetProcAddress
FreeLibrary
lstrcmpiA
WriteConsoleW
LockResource
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LoadResource
FindResourceA
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetModuleFileNameA
GetLocaleInfoW
LCMapStringW
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
CreateFileW
FileTimeToSystemTime
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
IsDebuggerPresent
OutputDebugStringW
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetSystemInfo
VirtualProtect
VirtualQuery
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
GetFileSizeEx
SetEndOfFile
user32
SendMessageA
GetDlgItem
SetWindowTextA
IsDialogMessageA
DialogBoxParamA
EnableWindow
CharNextA
DestroyWindow
DefWindowProcA
MessageBoxA
SetWindowLongA
EndDialog
UnregisterClassA
GetActiveWindow
MessageBoxTimeoutA
GetWindowTextLengthA
GetWindowTextA
advapi32
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Exports
Exports
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ